Privacy notice.

Who we are

Ether-X Ltd is a company registered in England & Wales (company no. 17123706), registered with the UK Information Commissioner's Office under reference ZC138203. Our registered office is 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom. Reach the data team at [email protected].

What we collect

EtherITSM is a self-service SaaS — your tenant runs in our UK datacentre. We process: account credentials and profile fields you supply, the ticket / change / asset / CMDB data you create in the platform, audit-log records of access and changes, and operational telemetry needed to run the service (request rates, error logs, performance counters).

Our role under UK GDPR

For your tenant data (tickets, CIs, knowledge articles, etc.) we are the processor; you are the controller. For your account credentials and billing records we are the controller. The Data Processing Agreement (DPA) governs the processor relationship.

Where your data lives

Customer data is stored and processed in the United Kingdom. We do not transfer your tenant data outside the UK as part of the standard service. Sub-processors are listed on the security page.

How long we keep it

While your subscription is active, we retain everything you write to the platform. After cancellation, your data is held in read-only form for 60 days (the contractual grace period) and then deleted within a further 15 days. Audit log retention is set by your tier — up to 7 years on Business, longer on Enterprise.

Your rights

Under UK GDPR you can ask us to confirm what we hold about you, ask for a copy, ask us to correct it, ask us to delete it (subject to retention obligations), and complain to the ICO. Email [email protected] with subject "DSAR" — we acknowledge within 5 UK business days and respond within 30 calendar days.

Cookies and tracking

This marketing site uses cookieless analytics — there is no cross-site tracking and no cookie banner is required under PECR / UK GDPR. The application sets a session cookie strictly necessary for sign-in. We do not use marketing pixels or third-party trackers anywhere.